Administrator, Systems (IAM)

Location: Washington, DC, United States. Hybrid role with office participation expected 2–3 days per week; short business travel may be required.

Salary: $115,000–$125,000 per year.

Company

Second Sight Solutions, a hirify.global subsidiary, is a health technology company developing drug discount data exchange solutions for manufacturers and customers.

What you will do

• Own employee and contractor identity lifecycle management in Microsoft Entra ID, including provisioning, role and group changes, offboarding, guest accounts, device registrations, and group-based licensing.
• Configure single sign-on, enterprise applications, app registrations, SCIM provisioning, Conditional Access, MFA, passwordless authentication, privileged access, and break-glass procedures.
• Perform access reviews, audits, compliance activities, security investigations, remediation, evidence collection, reporting, and IAM documentation.
• Automate identity administration and reporting with PowerShell, Microsoft Graph, and Entra lifecycle workflows; integrate identity services with HR, ticketing, endpoint-management, and SaaS systems.
• Support Mac onboarding and offboarding, device compliance, FileVault, Jamf/Intune integrations, and Tier 2/3 identity and access incidents.
• Coordinate IT projects, upgrades, migrations, maintenance, vendors, internal teams, clients, and technical representatives.

Requirements

• 3–4 years of IT experience in a similar capacity, including 2–3 years of hands-on IAM experience in Microsoft Entra ID and Microsoft 365 environments.
• Hands-on administration of Entra ID, including Conditional Access, MFA, passwordless authentication, enterprise applications, app registrations, SSO, group-based licensing, Privileged Identity Management, and access reviews.
• Understanding of least privilege, RBAC, segregation of duties, joiner/mover/leaver lifecycle management, Zero Trust, SAML, OAuth 2.0, OpenID Connect, and SCIM.
• Proficiency with PowerShell and Microsoft Graph API or comparable scripting for identity administration, reporting, and auditing automation.
• Experience with access reviews, audits, compliance, client security assessments, evidence, and documentation.
• Hands-on experience with Microsoft Intune; ability to deploy, configure, and manage Apple devices and BYOD phones at scale, with knowledge of Apple security, privacy, encryption, MFA, and secure device management.
• IT service-management ticketing experience, such as Jira, plus professional experience with macOS, Microsoft 365, hardware, software deployment, endpoint security, networking, antivirus, backup, and remote-access technologies.
• Strong customer service, communication, discretion with privileged and sensitive data, troubleshooting, critical-thinking, organization, prioritization, and multitasking skills.
• Experience managing IT projects involving hardware and software rollouts, upgrades, and migrations. On-call and overtime work are required.
• Must be able to verify the legal right to work in the United States without company sponsorship.

Nice to have

• Microsoft SC-300 or equivalent Microsoft security certification.
• CompTIA Security+, Apple Certified Support Professional, Apple Certified Mac Technician, ITIL 4 Foundation, or CompTIA A+ certification.
• Jamf experience.

Culture & Benefits

• Partial remote work is supported alongside required hybrid office participation.
• Core support coverage runs from 8:00am to 8:00pm local time and is shared across the team.
• Travel expenses are reimbursed.
• The role supports clients and remote personnel across Second Sight locations globally.
• Equal opportunity employment is provided, with reasonable accommodation where applicable.